6a43c616ef52d864f8dc8d27bdb4aba0f07f7bb431c5d73d8f1e623876de88c9 | Triage

Sharing

General

Target

6a43c616ef52d864f8dc8d27bdb4aba0f07f7bb431c5d73d8f1e623876de88c9
Size

313KB
Sample

221126-3xsz5aea65
MD5

d885d04b64349f0535e6068a38af7f45
SHA1

d8676ca4524f8d5b33cd0916225af1a6015b205e
SHA256

6a43c616ef52d864f8dc8d27bdb4aba0f07f7bb431c5d73d8f1e623876de88c9
SHA512

f97237d59dbb5e7b4097ca285e72463af70561c0bf9b4a2b9f1342be73ae0c662e0cadbd25d7ea482a67169630a5c0d6e4b7adcbc21081a9b9f0d2f1fe562543
SSDEEP

6144:YrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDy:Yrfu6/eIo4jVW5soVCcQovoO0DJM+E93

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6a43c616ef52d864f8dc8d27bdb4aba0f07f7bb431c5d73d8f1e623876de88c9
- Size
  
  313KB
- MD5
  
  d885d04b64349f0535e6068a38af7f45
- SHA1
  
  d8676ca4524f8d5b33cd0916225af1a6015b205e
- SHA256
  
  6a43c616ef52d864f8dc8d27bdb4aba0f07f7bb431c5d73d8f1e623876de88c9
- SHA512
  
  f97237d59dbb5e7b4097ca285e72463af70561c0bf9b4a2b9f1342be73ae0c662e0cadbd25d7ea482a67169630a5c0d6e4b7adcbc21081a9b9f0d2f1fe562543
- SSDEEP
  
  6144:YrJ9uEo2S1YnQmCX492DkwNP3qpYFQiY0Z56GICaNRCVEumbcF6ov5d889PgLVDy:Yrfu6/eIo4jVW5soVCcQovoO0DJM+E93
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2